This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: 37aPLoMq5xrIPGfTJd+NIUPC9fYCfCJ6qFzb2JPCkpM= Subject key identifier: 99:66:CF:9E:AF:76:1C:8B:F8:CB:7E:EB:6F:62:E4:82:95:A1:29:88 Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 059D Signing time: Mon 22 Dec 2025 22:17:16 +0000 Manifest this update: Mon 22 Dec 2025 22:17:16 +0000 Manifest next update: Mon 29 Dec 2025 22:17:16 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: W05JcMyL1kZ0MSaQVuhOtpWldZGAaeCC0Rl0eTJUPf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Dec 22 22:17:16 2025 GMT Not After : Dec 29 22:17:16 2025 GMT Subject: CN=6949c36c-aa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:0d:a4:e0:7c:63:c5:b8:e8:ac:05:8e:58: d6:ac:2e:60:07:25:5b:c4:06:10:ad:53:51:03:a5: 74:2a:f1:3d:a4:4d:79:03:67:48:b7:03:2e:69:29: 41:ab:f5:1c:45:71:5b:a3:db:76:a3:08:b3:b1:6b: b0:89:c6:9c:65:f6:df:77:b6:60:4a:51:00:77:9f: 94:d9:a4:fc:9b:71:1a:4a:70:ed:69:bb:bb:c2:f2: cf:e6:08:70:b4:0c:aa:80:62:2e:31:4a:3a:a4:31: 04:a2:80:25:8f:66:0d:33:8d:24:ac:54:0b:cf:96: 19:de:50:ba:28:d1:2b:40:44:30:1c:45:5c:dc:28: 2e:dc:d6:e9:9d:63:ca:d9:7d:90:24:b2:b4:c3:a8: 0d:77:ac:85:99:b9:c4:09:7e:6b:8c:df:fb:7f:69: 63:83:fd:4b:68:6f:8d:49:b0:57:13:3f:07:02:ec: fc:8f:45:37:b4:18:3e:1e:ca:71:9b:a0:7e:09:3e: ab:fc:6e:a7:04:02:8d:d3:d0:cd:d2:75:82:08:c4: e6:d7:a3:1d:34:26:1f:55:32:db:66:8b:06:8b:b4: 25:16:84:2f:36:34:9c:0e:35:a4:6a:78:b4:3a:b3: f1:d3:96:a3:5c:dc:66:5c:12:8a:29:05:f6:df:72: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:66:CF:9E:AF:76:1C:8B:F8:CB:7E:EB:6F:62:E4:82:95:A1:29:88 X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:37:69:97:8f:45:ec:12:5b:15:b1:30:67:c7:c2:59:df:de: 2b:d1:00:41:23:cd:b4:7e:4b:60:25:fc:c0:31:65:c1:d4:9e: 90:a7:e0:a1:2b:9a:e6:34:24:41:86:17:18:69:f8:76:5e:a2: b2:c6:50:b8:77:e0:18:15:37:8d:5b:53:71:cf:7f:d1:b6:30: 85:59:31:ab:ad:6c:52:fb:a2:64:87:ec:08:4c:6a:95:bf:7b: c4:07:e5:0b:d8:2f:57:0c:f7:64:88:87:b3:c9:a7:06:a9:10: f1:e2:9b:e6:2b:85:59:49:d3:46:9d:3a:9f:5d:fc:e1:ba:ef: 16:b3:7c:03:68:7e:42:8e:86:a7:cf:e9:70:fe:1f:dc:5a:79: e2:4e:91:b3:de:2c:7e:76:49:2a:e5:75:03:02:15:6a:4d:3a: ca:88:54:1d:c6:07:fa:c0:20:6c:99:74:89:25:fd:79:90:16: 9d:00:9f:23:e9:7f:90:8a:98:38:b9:8f:ba:22:ef:b3:c6:03: f3:76:15:d7:c8:03:66:06:8f:aa:4f:b6:31:fc:4a:72:19:97: 9a:a5:1c:ad:a9:0a:3c:5d:36:f4:27:5d:99:54:a5:dd:bb:7a: 2b:c5:45:09:1c:ea:c4:f2:0b:54:73:db:7d:b1:f3:ac:d3:44: d9:90:e7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUxMjIyMjIxNzE2WhcNMjUxMjI5MjIxNzE2WjAYMRYwFAYD VQQDDA02OTQ5YzM2Yy1hYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhkNpOB8Y8W46KwFjljWrC5gByVbxAYQrVNRA6V0KvE9pE15A2dItwMuaSlB q/UcRXFbo9t2owizsWuwicacZfbfd7ZgSlEAd5+U2aT8m3EaSnDtabu7wvLP5ghw tAyqgGIuMUo6pDEEooAlj2YNM40krFQLz5YZ3lC6KNErQEQwHEVc3Cgu3NbpnWPK 2X2QJLK0w6gNd6yFmbnECX5rjN/7f2ljg/1LaG+NSbBXEz8HAuz8j0U3tBg+Hspx m6B+CT6r/G6nBAKN09DN0nWCCMTm16MdNCYfVTLbZosGi7QlFoQvNjScDjWkani0 OrPx05ajXNxmXBKKKQX233L4iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlmz56v dhyL+Mt+629i5IKVoSmIMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9N2mXj0XsElsVsTBnx8JZ394r0QBBI820fktgJfzAMWXB1J6Qp+Ch K5rmNCRBhhcYafh2XqKyxlC4d+AYFTeNW1Nxz3/RtjCFWTGrrWxS+6Jkh+wITGqV v3vEB+UL2C9XDPdkiIezyacGqRDx4pvmK4VZSdNGnTqfXfzhuu8Ws3wDaH5Cjoan z+lw/h/cWnniTpGz3ix+dkkq5XUDAhVqTTrKiFQdxgf6wCBsmXSJJf15kBadAJ8j 6X+Qipg4uY+6Iu+zxgPzdhXXyANmBo+qT7Yx/EpyGZeapRytqQo8XTb0J12ZVKXd u3orxUUJHOrE8gtUc9t9sfOs00TZkOct -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:37 2025 by rpki-client